Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...47.exe

windows7-x64

9

JaffaCakes...47.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_28bcc383a20ae0930f26d862ae660847

  • Size

    444KB

  • Sample

    250226-1gwd7stxev

  • MD5

    28bcc383a20ae0930f26d862ae660847

  • SHA1

    69d96d3230be8d7fe6c1f4267ae8ee7c91bb3518

  • SHA256

    6c52fb0dec9ce5af28cc3bbf2c0a1d899821cd799dcbb69935d24f4555f79973

  • SHA512

    8d53dd3c2d47c54bc83e097d265f2a0621cb903c79ef4e39057a97f214bf5486c4bbaf37274020310623aa48cd4d8d31d58ad64a6640e7b4ef233075fc36177f

  • SSDEEP

    12288:nqoq3C4c0C3jaJBaPHaKx8Xk8NxagaElleY:qoczc3Ywt8XzNxagaClz

Score
10/10
isrstealercollectiondiscoveryspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_28bcc383a20ae0930f26d862ae660847

    • Size

      444KB

    • MD5

      28bcc383a20ae0930f26d862ae660847

    • SHA1

      69d96d3230be8d7fe6c1f4267ae8ee7c91bb3518

    • SHA256

      6c52fb0dec9ce5af28cc3bbf2c0a1d899821cd799dcbb69935d24f4555f79973

    • SHA512

      8d53dd3c2d47c54bc83e097d265f2a0621cb903c79ef4e39057a97f214bf5486c4bbaf37274020310623aa48cd4d8d31d58ad64a6640e7b4ef233075fc36177f

    • SSDEEP

      12288:nqoq3C4c0C3jaJBaPHaKx8Xk8NxagaElleY:qoczc3Ywt8XzNxagaClz

    Score
    9/10
    collectiondiscoveryspywarestealerupx

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook accounts

      collection

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks